2026-09-20 03:37:40
(5 days ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 06:24:27
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 02:24:19.065914 2026] [security2:error] [pid 606250:tid 606250] [client 161.115.234.76:50257] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.calvetparis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.calvetparis.com"] [uri "/noflash/41montaigne.html/heritage.html"] [unique_id "aqZBk-5QHKaMLfvl47stcwAAAAE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-11 20:55:04
(1 week ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /en/the-group/our-organisation | 2026-09-11 20:55 UTC
show less
Bad Web Bot
🇨🇿
akac
2026-09-09 05:04:15
(2 weeks ago)
Web vulnerability scanning: HTTP/2 GET /repo.d1e9a452.css
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-09-08 06:32:43
(2 weeks ago)
Enumerating paths that do not exist (scanning) | method: GET | path: /mentions-legales | 2026-09-08 ...
show more
Enumerating paths that do not exist (scanning) | method: GET | path: /mentions-legales | 2026-09-08 06:32 UTC
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 04:35:44
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 00:35:40.726314 2026] [security2:error] [pid 25330:tid 25330] [client 161.115.234.76:47405] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tedmccachren.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tedmccachren.com"] [uri "/labs/indexlabs.html/puppy-deposit.html"] [unique_id "ap-QnEcOg6026nwt6uAFOgAAABI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 21:06:14
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:06:07.035915 2026] [security2:error] [pid 7141:tid 7141] [client 161.115.234.76:55033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mdgcontrols.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mdgcontrols.com"] [uri "/"] [unique_id "aoDUv0AFaNEIjSriVqTuNgAAAAg"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-09 05:28:13
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 01:28:08.748150 2026] [security2:error] [pid 918375:tid 918375] [client 161.115.234.76:54789] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotelkona.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotelkona.com"] [uri "/team"] [unique_id "angP6HFkuTzwaMPUeW5ObwAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 19:48:39
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 15:48:32.320332 2026] [security2:error] [pid 1988162:tid 1988162] [client 161.115.234.76:42963] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wheelworks.my|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wheelworks.my"] [uri "/"] [unique_id "amkHkHVisULgNLdQTSOmNwAAABY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-10 16:47:17
(2 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 12:56:46
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:56:39.672889 2026] [security2:error] [pid 23022:tid 23022] [client 161.115.234.76:34873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rondrez.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rondrez.com"] [uri "/"] [unique_id "akpUh57aESS5dYG8FfaeygAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Alvino
2026-05-30 02:33:41
(3 months ago)
Blocked due to abuseScore: 12
Web Spam
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 00:21:12
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 20:21:06.419414 2026] [security2:error] [pid 31257:tid 31349] [client 161.115.234.76:53599] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.sonatro.io|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sonatro.io"] [uri "/"] [unique_id "agpbchV13tSzUa9m41JK-wAAAc0"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 21:13:09
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 17:13:05.884001 2026] [security2:error] [pid 27987:tid 27987] [client 161.115.234.76:45017] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.darnorb.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.darnorb.com"] [uri "/Ohlenbusch"] [unique_id "af5R4ZKpv46uz9xZceyuHgAAAAw"], referer: http://ohlenbusch.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 09:12:15
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 05:12:11.094522 2026] [security2:error] [pid 13715:tid 13715] [client 161.115.234.76:37961] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||travelsupersonic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "travelsupersonic.com"] [uri "/"] [unique_id "afxXa9DHn5c1rR9DKlnDKAAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
